It’s easy to use, but its options are buried in a text-based configuration file.

It isn’t available on Windows 10 Home.

Before Microsoft added this configuration file, you couldn’t customize Sandbox at all.

WindowsSandbox

If you didn’t want internet access, you normally had to disable it right after launch.

And, if you wanted particular third-party programs installed, you had to install them after launching Sandbox.

On the one hand, that makes for a more secure system.

Windows Sandbox Explorer and Host system Explorer showing a shared file

If something goes wrong, terminate the Sandbox, and everything gets deleted.

To alleviate that issue, Microsoft introduced a configuration feature for Windows Sandbox.

Using XML files, you could launch Windows Sandbox with set parameters.

Notepad showing <configuration> </configuration>

you could tighten or loosen the sandbox’s restrictions.

How to Configure Windows Sandbox

This guide assumes you have already set up Sandbox for general use.

If you haven’t done yet, you’ll need toenable it first with the Windows Features dialog.

adding command to disable virtual gpu

You’ll be creating an XML file for configuration.

While familiarity with theXML coding languageis helpful, it’s not necessary.

Double-clicking the file will launch Sandbox with the specified configuration.

adding command to disable networking

Asexplained by Microsoft, you have several options to choose from when configuring the Sandbox.

If you don’t specify an option, the default will be used.

So if you’re testing something you’re particularly worried about, it might be wise to disable them.

configuration files in file explorer

To disable data pipe access, which is enabled by default, add the following text.

Set it totrueto make the folder read-only orfalseto make it writable.

Giving Sandbox write access increases that risk.

If you’re testing anything you think may be malicious, you shouldn’t use this option.

You could, for instance, force the Sandbox to open a mapped folder upon launch.

It didn’t do anything at all, even when we used the example in Microsoft’s documentation.

Microsoft will likely fix this bug soon.

For example, if your text editor saves it as Sandbox.txt, save it as Sandbox.wsb.

To launch the Windows Sandbox with your options, double-tap the .wsb file.

you might place it on your desktop or create a shortcut to it in the Start menu.

For your convenience, it’s possible for you to download thisDisabledNetwork fileto save you a few steps.